Managed Poznote hosting

No. Poznote normally starts with a well known administrator name and password that you are asked to change after the first sign in. On CoreHost that account is replaced before the app starts: you sign in as admin with a password generated for your instance, and no account on your Poznote answers to the shipped default password.

Yes, if you add them. Nobody can sign up on their own. Add people under Settings, Admin Tools, User Management and set a password for each of them there; a new account cannot sign in until it has one. Then share a workspace with them, or a single note or folder.

No. Poznote has an admin switch that opens the app for every visitor without a password. On a public address that would publish your notes, so we keep it off and the app cannot turn it on. To share notes publicly, use a share link for that note or folder.

Yes. Put the client ID and secret of your OIDC application (Authentik, Keycloak, Pocket ID, Google, Microsoft and others) in the app settings on CoreHost, restart, and finish the setup in Poznote under Settings, Admin Tools, OIDC / SSO.

Yes, with services on the public internet: a cloud AI provider such as Anthropic or OpenAI, GitHub, GitLab or a public Gitea or Forgejo, any S3 compatible bucket, your mail server and public webhook addresses. For safety the app cannot reach private or local network addresses, so a model server on your home network is out of reach unless you publish it.

Yes. Poznote imports Markdown, HTML and text files, whole folders and Poznote backups under Settings, Restore / Import, and exports a complete backup or single notes under Settings, Backup / Export. You can also copy the data folder over SFTP.

Your instance is yours alone, in your chosen region, with daily encrypted backups. We access instance contents only to operate the service. The acceptable use policy spells that out.

We do. Curated updates roll out shortly after upstream releases and are tested on our platform first; security fixes move fast. If an update changes behaviour in a breaking way, we email you before it lands.

Take a final export or SFTP copy any time before you cancel. After termination we keep your data for 14 days (in case you change your mind), then purge it, backups included.

Yes. Point a CNAME at your instance, prove ownership with a TXT record, and TLS certificates are issued automatically. Cloudflare-proxied domains work; if you use CAA records, allow letsencrypt.org.